EAOS · Cyber Security Platform

EAOS FORGE-OT — Industrial Cyber Range & Process Digital Twin

Three engines — simulation, attack, and validation — over a digital twin of the physical process, fully offline.

FORGE-OT product visual
8industrial protocol engines
79ATT&CK for ICS techniques
24standard ICS tests

The question is not which tools were purchased, but whether the defence holds before a threat reaches the physical process. FORGE-OT builds the industrial environment with a Purdue-aware topology and virtual devices, models the real dynamics of the process, runs an ICS adversary from ATT&CK for ICS, and measures firewalls, zoning, IDS/IPS, and data diodes against physical consequence — then delivers a signed evidence package mapped to IEC 62443 and NERC CIP. No mode of the product creates a path to act on the production network, and every AI inference stays local and offline.

Capabilities

Industrial environment simulation: Purdue-aware topology with virtual vPLC, vRTU, vIED, vHMI, and vSCADA
Process digital twin: generator, transformer, breaker, pump, tank, and pipeline dynamics
Cyber attack engine: 79 MITRE ATT&CK for ICS techniques, protocol fuzzing, command replay, and false data injection
Validation engine: firewall, zone and conduit, IDS/IPS, and data-diode effectiveness measured with MTTD and MTTR
Staged penetration testing: 19 methods across the 5 CEH phases and 24 standard ICS tests in 8 categories
Local AI analyst: log and PCAP analysis with rule proposals, always behind human approval
Immutable evidence package and a signed before-remediation to after-remediation report
Safe by default: no path to act on the production network; hardware-in-the-loop only on the isolated bench

EAOS · ARCHITECTURE

System architecture

Three independent but composable engines under a single governance core; the isolation boundary never reaches the production network, and the only real-device path is the isolated hardware-in-the-loop bench.

EAOS FORGE-OT macro architecture
EAOS FORGE-OT macro architecture

EAOS · CATALOGUE

Product catalogue

FORGE-OT — industrial cyber range and process digital twin · version 1.0, Mordad 1405

Page 1 of 10 — Cover — FORGE-OT, the industrial cyber range and process digital twin
Page 2 of 10 — 01 The product at a glance — three engines and one digital twin, delivered as a single product
Page 3 of 10 — 02 Why this platform exists — the gap between the control that was bought and the control that holds on the day of the attack
Page 4 of 10 — 03 Capabilities — five pillars and nine modules, each with an owner, a contract, and a defined output
Page 5 of 10 — 04 Use cases — one real chain, and what each stakeholder takes from it
Page 6 of 10 — 05 Technical coverage — eight protocol engines, 79 ATT&CK techniques, 24 standard ICS tests
Page 7 of 10 — 06 Architecture — three independent but composable engines under a single governance core
Page 8 of 10 — 07 The evidence loop — from attack to consequence to remediation to proof of remediation, and exactly where AI sits
Page 9 of 10 — 08 Status and roadmap — what is built, what is in progress, and what is not claimed
Page 10 of 10 — Back cover — does our defence stop today's threat before it reaches the physical process?

Click a page edge to turn it, or step forward and back with the ← and → keys.